How do you keep my payment information secure?

Encryption in transit

Every page that handles payment or personal data is served over HTTPS (TLS). Your information is encrypted between your browser and our systems, so it cannot be read in transit.

PCI-DSS compliant processing

Card payments are handled by a certified, PCI-DSS Level 1 provider - the highest level of security in the payments industry. Sensitive card data goes directly to them and is never processed on our own servers.

3-D Secure

Card transactions are protected by 3-D Secure (Verified by Visa, Mastercard Identity Check), adding a verification step with your bank to confirm it is really you.

Tokenisation

When you save a card for faster checkout, we store only a secure token from the provider - never the actual card number, expiry or security code.

Fraud protection

Orders are screened by automated fraud checks. If something looks unusual we may ask you to verify a detail before we ship, to protect you and your account.